Skip to content

Instantly share code, notes, and snippets.

View ams0's full-sized avatar
🏠
Working from home

Alessandro Vozza ams0

🏠
Working from home
View GitHub Profile
@ams0
ams0 / aks_privatecluster_dns.sh
Created December 12, 2019 09:07
A simple script to extract the private DNS IP for an AKS private cluster
‎‎​#/bin/bash
#AKS private clusters
#Setup VPN gw with OpenVPN
rg=k8s
clustername=private
az aks get-credentials -g $rg -n $clustername
@ams0
ams0 / blog.md
Last active December 21, 2019 18:55
Introducing Gistlog landing pages

Welcome to my landing page for my Gistlog; I've been experimenting with blogging platforms for a while but I think I found my Nirvana. Stay tuned!

Keybase proof

I hereby claim:

  • I am ams0 on github.
  • I am avozza (https://keybase.io/avozza) on keybase.
  • I have a public key whose fingerprint is B10E C607 72E9 459D 6B5A 7D84 BEE1 E1EE 7CE6 4FD5

To claim this, I am signing this object:

@ams0
ams0 / es-kibana.yaml
Created February 8, 2020 11:38
Install Kibana+ES (first, run `kubectl apply -f https://download.elastic.co/downloads/eck/1.0.0/all-in-one.yaml`
apiVersion: elasticsearch.k8s.elastic.co/v1
kind: Elasticsearch
metadata:
name: es
spec:
version: 7.5.2
nodeSets:
- name: default
count: 3
volumeClaimTemplates:
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: fluentd-elasticsearch
namespace: kube-system
labels:
k8s-app: fluentd-logging
version: v1
spec:
selector:
Every pod can do (https://github.com/cloudbooster/Azure-Instance-Metadata/blob/master/Instance-Metadata.md):
curl -H Metadata:true http://169.254.169.254/metadata/instance?api-version=2017-03-01
and get info on the node etc, even identity
az vmss identity assign -g MC_K8S_NFS_WESTEUROPE -n aks-base-11322803-vmss
curl 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fmanagement.azure.com%2F' -H Metadata:true -s
kubectl create ns ingress
#took forever to figure out
helm install nginx-ingress stable/nginx-ingress \
--namespace ingress \
--set controller.replicaCount=2 \
--set controller.service.annotations."service\.beta\.kubernetes\.io\/azure-load-balancer-internal"="true" \
--set controller.service.annotations."service\.beta\.kubernetes\.io\/azure-dns-label-name"="internal" \
--set controller.metrics.enabled=true \
--set controller.stats.enabled=true \
kind: ServiceAccount
apiVersion: v1
metadata:
name: datadog-agent
namespace: datadog
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: datadog-agent
#1.16.7 works, 1.17.3 no (AKS)
#helm3
#nginx-ingress
helm repo add stable https://kubernetes-charts.storage.googleapis.com
kubectl create ns ingress
helm upgrade --install ingress stable/nginx-ingress \
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: dbench-pv-claim
spec:
storageClassName: managed-premium
# storageClassName: gp2
# storageClassName: local-storage
# storageClassName: ibmc-block-bronze
# storageClassName: ibmc-block-silver